package.json

{
  "name": "threat-dragon-server",
  "version": "2.6.0",
  "private": true,
  "scripts": {
    "audit": "npm audit",
    "build": "npm-run-all clean:dist transpile",
    "make-sbom": "npm-run-all -lp --aggregate-output make-sbom:\\*",
    "make-sbom:xml": " cyclonedx-npm --omit=dev --ignore-npm-errors --spec-version=1.5 --output-format=XML  --output-file=sbom.xml",
    "make-sbom:json": "cyclonedx-npm --omit=dev --ignore-npm-errors --spec-version=1.5 --output-format=JSON --output-file=sbom.json",
    "clean": "rimraf --glob *.log .nyc_output/ coverage/ dist/ node_modules/",
    "clean:dist": "rimraf dist",
    "dev": "nodemon dev.js --exec babel-node",
    "lint": "eslint src --fix",
    "pretest": "npm run lint",
    "start": "npm run dev",
    "start:server": "pm2 --name td.server start 'nodemon dev.js --exec babel-node'",
    "stop:server": "pm2 delete td.server",
    "transpile": "babel ./src --out-dir dist",
    "test": "cross-env NODE_OPTIONS=--no-experimental-detect-module NODE_ENV=test nyc mocha --require @babel/register --all true --timeout=900 test/*.spec.js test/**/*.spec.js",
    "test:unit": "cross-env NODE_OPTIONS=--no-experimental-detect-module NODE_ENV=test nyc --reporter=lcov --reporter=text-summary mocha --require @babel/register --all true --timeout=900 test/*.spec.js test/**/*.spec.js"
  },
  "description": "OWASP Threat Dragon - a free, open source threat modeling tool",
  "author": {
    "name": "OWASP Threat Dragon",
    "email": "jon.gadsden@owasp.org",
    "url": "https://owasp.org/www-project-threat-dragon/"
  },
  "license": "Apache-2.0",
  "homepage": "https://github.com/OWASP/www-project-threat-dragon/",
  "repository": {
    "type": "git",
    "url": "git://github.com/OWASP/threat-dragon.git"
  },
  "bugs": {
    "email": "jon.gadsden@owasp.org",
    "url": "https://github.com/OWASP/threat-dragon/issues"
  },
  "resolutions": {},
  "dependencies": {
    "@babel/runtime": "^7.29.2",
    "@gitbeaker/rest": "^43.8.0",
    "axios": "^1.15.0",
    "bitbucket": "^2.11.0",
    "dotenv": "^16.0.3",
    "express": "^5.0.1",
    "express-rate-limit": "^8.3.2",
    "googleapis": ">=171.4.0",
    "helmet": "^8.1.0",
    "jsonwebtoken": "^9.0.3",
    "octonode": "^0.10.2",
    "serve-favicon": "^2.5.0",
    "winston": "^3.8.2"
  },
  "devDependencies": {
    "@babel/cli": "^7.27.0",
    "@babel/core": "^7.26.10",
    "@babel/eslint-parser": "^7.27.0",
    "@babel/node": "^7.26.0",
    "@babel/plugin-transform-runtime": "^7.26.10",
    "@babel/preset-env": "^7.29.2",
    "@babel/register": "^7.25.9",
    "@cyclonedx/cyclonedx-npm": "^1.18.0",
    "chai": "^4.3.7",
    "chai-as-promised": "^7.1.1",
    "cross-env": "^7.0.3",
    "eslint": "^8.46.0",
    "mocha": "^10.8.2",
    "nodemon": "^2.0.22",
    "npm-force-resolutions": "^0.0.10",
    "npm-run-all2": "^8.0.4",
    "nyc": "^15.1.0",
    "passport-local": "1.0.0",
    "pm2": "^6.0.13",
    "rimraf": "^6.1.3",
    "sinon": "^10.0.0",
    "sinon-chai": "^3.7.0",
    "supertest": "^4.0.2"
  },
  "overrides": {
    "@babel/traverse": ">=7.23.2",
    "ajv@<6.14.0": "^6.14.0",
    "body-parser": ">=2.2.1",
    "braces": ">=3.0.3",
    "brace-expansion@<2.0.0": "^1.1.13",
    "brace-expansion@>2.0.0 <3.0.0": "^2.0.3",
    "brace-expansion@>5.0.0 <5.0.5": "^5.0.5",
    "cookie": ">=0.7.0",
    "cross-spawn@<7.0.0": "6.0.6",
    "cross-spawn@>=7.0.0": ">=7.0.5",
    "debug@<3.1.0": ">=4.3.4",
    "form-data@<2.5.4": "^2.5.4",
    "follow-redirects": ">=1.15.6",
    "got": ">=11.8.5",
    "ip@<1.1.9": "1.1.9",
    "ip@=2.0.0": ">=2.0.1",
    "minimatch@>=9.0.0 <9.0.7": "9.0.7",
    "minimatch@<3.0.5": ">=3.0.5",
    "path-to-regexp@<1.0.0": "0.1.12",
    "path-to-regexp@8.3.0": "^8.4.0",
    "picomatch@<3.0.0": "^2.3.2",
    "picomatch@>4.0.0 <4.0.4": "^4.0.4",
    "postcss@<8.4.31": ">=8.4.31",
    "send": ">=0.19.0",
    "serialize-javascript": ">=6.0.2",
    "systeminformation": ">=5.23.23",
    "tough-cookie@<4.1.3": ">=4.1.3",
    "vm2@<3.9.16": ">=3.9.19",
    "ws": ">=8.18.0"
  }
}